Microsoft (R) Windows Debugger Version 6.3.9600.17029 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [E:\dumps\121314-18002-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available ************* Symbol Path validation summary ************** Response Time (ms) Location Deferred srv*E:\Symbols*http://msdl.microsoft.com/download/symbols ************* Symbol Path validation summary ************** Response Time (ms) Location Deferred srv*E:\Symbols*http://msdl.microsoft.com/download/symbols Symbol search path is: srv*E:\Symbols*http://msdl.microsoft.com/download/symbols Executable search path is: srv*E:\Symbols*http://msdl.microsoft.com/download/symbols Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.17727.amd64fre.win7sp1_gdr.111118-2330 Machine Name: Kernel base = 0xfffff800`03a10000 PsLoadedModuleList = 0xfffff800`03c54650 Debug session time: Sat Dec 13 04:40:53.392 2014 (UTC + 2:00) System Uptime: 1 days 7:14:05.360 Loading Kernel Symbols . Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long. Run !sym noisy before .reload to track down problems loading symbols. .............................................................. ................................................................ ............................... Loading User Symbols Loading unloaded module list ............ ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 24, {1904fb, fffff880076689f8, fffff88007668250, fffff880016d5034} Probably caused by : Ntfs.sys ( Ntfs!TxfCompareTxfFcbTableEntries+14 ) Followup: MachineOwner --------- 0: kd> kd: Reading initial command '.locale .1251; !analyze -v; q' Locale: Russian_Russia.1251 ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* NTFS_FILE_SYSTEM (24) If you see NtfsExceptionFilter on the stack then the 2nd and 3rd parameters are the exception record and context record. Do a .cxr on the 3rd parameter and then kb to obtain a more informative stack trace. Arguments: Arg1: 00000000001904fb Arg2: fffff880076689f8 Arg3: fffff88007668250 Arg4: fffff880016d5034 Debugging Details: ------------------ EXCEPTION_RECORD: fffff880076689f8 -- (.exr 0xfffff880076689f8) ExceptionAddress: fffff880016d5034 (Ntfs!TxfCompareTxfFcbTableEntries+0x0000000000000014) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 0000000000000000 Parameter[1]: ffffffffffffffff Attempt to read from address ffffffffffffffff CONTEXT: fffff88007668250 -- (.cxr 0xfffff88007668250;r) rax=0000000000000000 rbx=fffff8a0037910f0 rcx=fffffa8007901858 rdx=fffff88007668cb0 rsi=fffffa8007901858 rdi=0000000000000000 rip=fffff880016d5034 rsp=fffff88007668c38 rbp=fffff88007668cb0 r8=fbfff8a004470b48 r9=0000000000000000 r10=fffff8a00e6566a0 r11=fffff8a00f9ba7b0 r12=0000000000000000 r13=fffffa80079018c0 r14=fffff88007668de8 r15=0000000000000000 iopl=0 nv up ei ng nz na po nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00210286 Ntfs!TxfCompareTxfFcbTableEntries+0x14: fffff880`016d5034 498b00 mov rax,qword ptr [r8] ds:002b:fbfff8a0`04470b48=???????????????? Last set context: rax=0000000000000000 rbx=fffff8a0037910f0 rcx=fffffa8007901858 rdx=fffff88007668cb0 rsi=fffffa8007901858 rdi=0000000000000000 rip=fffff880016d5034 rsp=fffff88007668c38 rbp=fffff88007668cb0 r8=fbfff8a004470b48 r9=0000000000000000 r10=fffff8a00e6566a0 r11=fffff8a00f9ba7b0 r12=0000000000000000 r13=fffffa80079018c0 r14=fffff88007668de8 r15=0000000000000000 iopl=0 nv up ei ng nz na po nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00210286 Ntfs!TxfCompareTxfFcbTableEntries+0x14: fffff880`016d5034 498b00 mov rax,qword ptr [r8] ds:002b:fbfff8a0`04470b48=???????????????? Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: STRING_DEREFERENCE PROCESS_NAME: chrome.exe CURRENT_IRQL: 0 ERROR_CODE: (NTSTATUS) 0xc0000005 - Инструкция по адресу "0x%08lx" обратилась к памяти по адресу "0x%08lx". Память не может быть "%s". EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Инструкция по адресу "0x%08lx" обратилась к памяти по адресу "0x%08lx". Память не может быть "%s". EXCEPTION_PARAMETER1: 0000000000000000 EXCEPTION_PARAMETER2: ffffffffffffffff READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003cbe100 GetUlongFromAddress: unable to read from fffff80003cbe1c0 ffffffffffffffff FOLLOWUP_IP: Ntfs!TxfCompareTxfFcbTableEntries+14 fffff880`016d5034 498b00 mov rax,qword ptr [r8] FAULTING_IP: Ntfs!TxfCompareTxfFcbTableEntries+14 fffff880`016d5034 498b00 mov rax,qword ptr [r8] BUGCHECK_STR: 0x24 ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) x86fre LAST_CONTROL_TRANSFER: from fffff80003ab5ed2 to fffff880016d5034 STACK_TEXT: fffff880`07668c38 fffff800`03ab5ed2 : fffff800`03c165d0 00000000`00000801 00000000`00000001 fffff800`03aae992 : Ntfs!TxfCompareTxfFcbTableEntries+0x14 fffff880`07668c40 fffff880`016c38b5 : 00000000`00000000 fffffa80`0bd71990 fffffa80`07901858 fffffa80`07900640 : nt!RtlLookupElementGenericTableAvl+0x32 fffff880`07668c70 fffff880`016c261f : fffffa80`07900180 00010000`0000b971 fffffa80`0c16b001 fffff8a0`109f8950 : Ntfs!TxfCreateTxfFcb+0xb1 fffff880`07668cf0 fffff880`01693d8b : fffffa80`0c16b010 fffffa80`07900180 fffffa80`0c16b010 00010000`0000b971 : Ntfs!NtfsCreateFcb+0x4ed fffff880`07668dd0 fffff880`016b8179 : fffff880`07669370 fffffa80`0bd71990 fffffa80`0c16b010 00000000`00000000 : Ntfs!NtfsOpenFile+0x1cb fffff880`07668fc0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsCommonCreate+0xc49 SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: Ntfs!TxfCompareTxfFcbTableEntries+14 FOLLOWUP_NAME: MachineOwner MODULE_NAME: Ntfs IMAGE_NAME: Ntfs.sys DEBUG_FLR_IMAGE_TIMESTAMP: 4d79997b IMAGE_VERSION: 6.1.7601.17577 STACK_COMMAND: .cxr 0xfffff88007668250 ; kb FAILURE_BUCKET_ID: X64_0x24_Ntfs!TxfCompareTxfFcbTableEntries+14 BUCKET_ID: X64_0x24_Ntfs!TxfCompareTxfFcbTableEntries+14 ANALYSIS_SOURCE: KM FAILURE_ID_HASH_STRING: km:x64_0x24_ntfs!txfcomparetxffcbtableentries+14 FAILURE_ID_HASH: {0169a782-cb97-6c31-4f61-f707eabe098a} Followup: MachineOwner --------- quit: